Attackers usually start with your accounts. A few settings changes make it dramatically harder for anyone to take them over or use them to reach you.
Lock down logins
Assume every password will eventually leak. Layered protection is what actually keeps accounts yours.
- Turn on multi-factor auth everywhere — prefer an authenticator app over SMS.
- Use a password manager and unique passwords for every account.
- Review active sessions and sign out unknown devices.
- Log out of email and social apps on shared or mobile devices when you're done.
Cut off the side doors
Recovery flows, connected apps, and old accounts are common ways in.
- Set a strong PIN or passcode on your phone number with your carrier.
- Update recovery email and phone — remove any you no longer control.
- Revoke third-party apps you no longer use.
- Delete inactive accounts so they can't be hijacked and used against you.